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Top Stories 

• Unicold Corp., agreed to pay $197,000 in penalties and to make health and safety 
improvements at its refrigerated food warehouse in Honolulu as part of a settlement with 
the U.S. Department of Labor March 30. - Honolulu Star-Advertiser (See item 12 ) 

• Police captured an escaped prisoner in Washington, D.C., March 31 who had overpowered 
a guard at Inova Fairfax Hospital in Virginia prompting authorities to lock down the 
hospital and surrounding streets for several hours. - WRC 4 Washington, D.C (See item 19 ) 

• A former U.S. Secret Service agent surrendered to authorities March 30 and a U.S. Drug 
Enforcement Administration agent was arrested March 27 for allegedly stealing over $1.5 
million in bitcoins while investigating the Silk Road. - USA Today (See item 23 ) 

• Security researchers at Check Point Software Technologies discovered that a 
cyberespionage group has hacked into hundreds of defense contractor, telecommunications 
operator, media group, and educational organization networks from at least 10 countries in 
ongoing attacks that began in late 2012.- Network World (See item 35) 



Fast Jump Menu 



PRODUCTION INDUSTRIES 

• Energy 

• Chemical 

• Nuclear Reactors. Materials, and Waste 

• Critical Manufacturing 

• Defense Industrial Base 

• Dams 

SUSTENANCE and HEALTH 

• Food and Agriculture 

• Water and Wastewater Systems 

• Healthcare and Public Health 



SERVICE INDUSTRIES 

• Financial Services 

• Transportation Systems 

• Information Technology 

• Communic ations 

• Commercial Facilities 
FEDERAL and STATE 

• Government Facilities 

• Emergency Services 



- 1 - 



Energy Sector 



See item 34 
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Chemical Industry Sector 

1. March 31, Charleston Gazette - (West Virginia) Freedom Industries reaches deal 
with DEP on cleanup timeline. The West Virginia Department of Environmental 
Protection approved March 27 a Voluntary Remediation Agreement proposed by 
Freedom Industries that outlines a series of reports and work that the company will 
perform to reclaim the site of a January 2014 chemical spill into the Elk River that 
contaminated the water supply of 300,000 residents. Final remediation is schedule to be 
complete in 2016, and all contamination at the site must be removed 

Source: http://www.wvgazette.com/article/20150331/GZ01/150339857 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

2. March 30, Minneapolis Star-Tribune - (Minnesota) Xcel nuclear power unit back 
online after false fire alarm. Xcel Energy officials reported that the Unit 2 reactor at 
the Prairie Island Nuclear Generating Plant in Red Wing was back to full power March 
28 after workers repaired a ruptured disk in a pressure tank that triggered the plant’s 
fire alarm, affected the cooling and ventilation systems, and prompted the reactor to 
shut down March 5. 

Source: http://www.startribune.com/local/298018451.html 

3. March 30, Arkansas Department of Health - (Arkansas) Stolen radioactive gauge. 

The Arkansas Department of Health, Radiation Control Program reported that a gauge 
containing radioactive material was stolen from a construction site in northwest Pulaski 
County March 30. The device is shielded but could present a radiation hazard if the 
radioactive sources are exposed or removed from their sealed container. 

Source: 

http://www.arkansas.gov/health/newsroom/index.php?do:newsDetail=l&news id= 110 

8 

4. March 30, U.S. Nuclear Regulatory Commission - (Louisiana) NRC begins special 
inspection at River Bend Station. The U.S. Nuclear Regulatory Commission initiated 
a special inspection at Entergy’s River Bend nuclear power plant in St. Francisville 
March 30 to review circumstances surrounding March 9 and February 23 events in 
which equipment that provides cooling and ventilation to plant areas housing safety- 
related equipment failed to start. 

Source: http://www.nrc.gov/reading-rm/doc-collections/news/2015/15-006.iv.pdf 
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Critical Manufacturing Sector 

5. March 31, Pittsburgh Business Times - (Minnesota) U.S. Steel cuts more from 
Minnesota ore. U.S. Steel Corp., announced March 31 that it will idle a portion of its 
Minnesota Ore Operations Minntac plant in Mt. Iron effective June 1, as part of 
ongoing company operational adjustments to market conditions. Operations at the 
Minntac plant will continue at reduced capacity in order to meet customer demand. 
Source: http://www.biziournals.com/pittsburgh/news/2015/Q3/31/u-s-steel-announces- 
cuts-more-from-minnesota-ore.html 

T Return to top i 



Defense Industrial Base Sector 

See item 35 
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Financial Services Sector 

6. March 30, MarketWatch - (International) Am E x Black Card members are more 
likely targets for fraud. Forter released results of a year-long study of hundreds of 
thousands of transactions worldwide March 30, in which they found that holders of 
American Express Co.’s Centurion Card are nearly twice as likely to be targets of credit 
card fraud as other basic credit card holders, due to their higher perceived market value. 
Source: http://www.marketwatch.com/story/amex-black-card-members-are-more- 
likely-targets-for- fraud-201 5-03-30 

For another story, see item 23 
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Transportation Systems Sector 

7. March 31, WCAU 10 Philadelphia - (Pennsylvania) Deadly crash, involving FedEx 
tractor-trailer, closes Interstate 78 in Pennsylvania. Police reported that a portion of 
Interstate 78 in Greenwich Township, Pennsylvania, will remain closed for at least 8 
hours due to a 3-vehicle crash involving a FedEx semi-truck and 2 other vehicles that 
left several people injured March 31. 

Source: http://www.nbcphiladelphia.com/traffic/transit/Interstate-78-Crash-Big-Rig- 
298107821.html 

8. March 31, KXAS 5 Fort Worth - (Texas) Explosion causes semitrailer collision on I- 
35E. Interstate 35E in Fancaster, Texas, was expected to remain closed for at least 3 
hours March 31 after a semi-truck carrying tires caught fire after driving across lanes of 
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traffic and colliding with another semi-truck near Parkerville Road March 31. One 
driver suffered injuries. 

Source: http://www.nbcdfw.com/news/local/Explosion-Causes-Semitrailer-Collision- 
on-I-35E-298110291.html 

9. March 31, KHQ 6 Spokane - (Idaho) Spokane flight from Houston with Gonzaga 
fans onboard diverted to Boise. A Southwest Airlines flight headed to Spokane, 
Washington, from Houston diverted to Boise, Idaho, March 30 when a strong odor of 
smoke filled the passenger cabin. The airline reported that the plane was taken out of 
service for inspection and that passengers were placed on other flights. 

Source: http://www.khq.com/story/28656251/photos-spokane-fhght-from-houston- 
with-gonzaga-fans-onboard-diverted-to-boise 

10. March 30, WNBC 4 New York City - (New York) 12 injured, 1 seriously, when car 
hits MTA bus in Brooklyn: Officials. Authorities are investigating after 12 
individuals were injured when a vehicle struck the side of a Metropolitan 
Transportation Authority bus in Brooklyn after allegedly running through a stop sign 
March 30. 

Source: http://www.nbcnewyork.com/news/local/Brooklyn-Bus-Car-Crash-Iniured- 
Hospital-297998381.html 
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Food and Agriculture Sector 

11. March 30, WCVB 5 Boston - (Massachusetts) Passenger at Logan found with 26 
pounds of quail eggs. U.S. Customs and Border Protection agriculture specialists 
successfully intercepted 26 pounds of quail eggs at Boston Logan International Airport 
after a passenger arriving from Vietnam declared the food to customs agents without 
the documentation required for all egg products originating from regions affected with 
avian flu. Customs agents destroyed the quail eggs and the rice hulls that they were 
wrapped in as a precaution. 

Source: http://www.wcvb.com/news/passenger-found-with-26-pounds-of-quail-eggs-at- 
logan/32087786 

12. March 30, Honolulu Star-Advertiser - (Hawaii) Food warehouse to pay nearly $200k 
in fines, fix safety flaws. Unicold Corp., agreed to pay $197,000 in penalties and to 
make health and safety improvements at its refrigerated food warehouse in Honolulu as 
part of a settlement with the U.S. Department of Labor that was announced March 30. 
The settlement was reached following a 2013 inspection that revealed health and safety 
violations that resulted in 63 citations for Unicold. 

Source: 

http://www.staradvertiser.com/news/breaking/20150330 Lood warehouse to pay nea 
rly 200k in fines fix safety flaws.html?id=298035621 



13. March 30, Los Angeles Daily News- (California) Los Angeles seafood company L.A. 
Star closed for unhealthy conditions. The U.S. Department of Justice announced 
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March 30 that a federal judge ordered L.A. Star Seafood Co. Inc., located in the Little 
Tokyo area of Los Angeles, to halt production and distribution of ready-to-eat smoked, 
salt-cured, and pickled seafood products due to unsanitary conditions that contributed 
to a failure to control the bacteria that causes listeriosis and botulism. The facility can 
reopen after specific steps are taken to come into compliance with the Federal Food, 
Drug and Cosmetic Act. 

Source: http://www.dailynews.com/business/2015033Q/los-angeles-seafood-company- 
la-star-closed-for-unhealthy-conditions/1 



14. March 28, Reuters - (Minnesota) Minn, finds third bird flu infection in commercial 
poultry flock. The U.S. Department of Agriculture confirmed March 28 that a case of 
H5N2 flu was detected in a flock of 39,000 turkeys at a commercial poultry farm in 
Steams County, prompting State officials to quarantine the farm and cull the flock to 
prevent the spread of the disease. 

Source: http://www.inforum.com/news/3710396-minn-finds-third-bird-flu-infection- 
commercial-poultry- flock 

15. March 28, Associated Press; Austin Daily Herald - (Minnesota) Farm with Jennie-O 
ties hit by bird flu outbreak. Officials announced March 27 that a Lac qui Parle 
County turkey farm with ties to Hormel Foods Corp. subsidiary Jennie-0 Turkey Store 
was struck with the H5N2 avian influenza strain, causing 22,000 birds to die and 
prompting officials to cull an additional 44,000 turkeys. Jennie-0 Officials stated that 
the affected turkeys were not ready for market and no turkeys with the flu strain entered 
the food chain. 

Source: http://www.austindailvherald.com/2015/03/farm-with-iennie-o-ties-hit-by-bird- 
flu-outbreak/ 



16. March 28, Omaha World-Herald - (Iowa) Two Harlan co-op workers hospitalized in 
Omaha. First responders removed and decontaminated two workers at the Farm 
Service Cooperative in Harlan that were exposed to anhydrous ammonia March 28 
before the individuals were transported to area hospitals for treatment. Authorities 
ventilated the building and continue to investigate the cause of the ammonia release. 
Source: http://www.omaha.com/news/iowa/two-harlan-co-op-workers-hospitalized-in- 
omaha/article deb7c972-d56c-l Ie4-a4e3-93b2902al32e.html 
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Water and Wastewater Systems Sector 

17. March 30, Orange County Register - (California) Sewage spill closes a mile of San 
Clemente beach. An outage at the San Clemente North Beach pump station caused 
5,000 gallons of sewage to overflow into the ocean at the base of pier March 29 
prompting officials to close a half-mile long stretch of the beach in each direction from 
the pier through at least April 1. 

Source: http://www.ocregister.com/articles/beach-656102-clemente-san.html 
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18. March 30, Annapolis Capital/Maryland Gazette - (Maryland) Eli Cove closed after 



sewer overflows. Anne Arundel Health Department officials announced March 30 that 
Eli Cove in Pasadena, Maryland, will be closed until April 6 after 60,750 gallons of 
wastewater overflowed March 29 from a nearby sewer due to debris placed in a 
manhole near a county pump station. Authorities continue to investigate after 
determining the tributary of Stoney Creek was impacted by the spill. 

Source: http://www.capitalgazette.com/maryland gazette/news/ph-ac-cn-eli-cove- 
033 1-20150330,0,3788301 .story 
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Healthcare and Public Health Sector 

19. March 31, WRC 4 Washington, D.C. - (Virginia; Washington, D.C.) Man who 
escaped Inova Fairfax Hospital captured after 9-hour manhunt. Police captured an 
escaped prisoner in Washington, D.C., March 31 who had overpowered a guard at 
Inova Fairfax Hospital in Virginia prompting the hospital and surrounding streets to be 
locked down for several hours before carjacking a vehicle. The driver of the vehicle 
crashed into a home after the suspect kicked out the backseat from inside the truck and 
fled, stealing another vehicle before he was captured by authorities. 

Source: http://www.nbcwashington.com/news/local/Active-Shooter-Reported-at-Inova- 
Fairfax-Hospital-298 1065 1 1 .html 

20. March 30, Wilmington Star-News - (North Carolina) Wilmington man pleads guilty 
to pharmacy robberies. A suspect pleaded guilty March 30 to a series of pharmacy 
robberies in Wilmington April 2014 and January 2015 after police found over 3,000 
prescription pills and a BB gun at his residence during his arrest. 

Source: http://www.stamewsonline.com/article/20150330/ARTICFES/150339966 

21. March 30, Associated Press - (Hawaii) VA Inspector: Honolulu supervisor 
manipulated veterans’ benefit data to make team look better. A report issued by the 
U.S. Department of Veterans Affairs Office of Inspector General found that a 
supervisor at the Veterans Administration Office in Honolulu was manipulating data in 
2014 by removing controls in the electronic record that are used to track and identify 
the progress of claims to make it look like the agency was processing benefits claims 
faster. The data manipulation caused delays for the delivery of benefits to 143 veterans 
and authorities have since taken corrective action on all improperly processed cases. 
Source: http://www.usnews.com/news/us/articles/2015/03/3Q/report-hawaii-supervisor- 
manipulated-veterans-benefit-data 
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Government Facilities Sector 

22. March 31, Softpedia - (Illinois) Bradley University systems infected with malware, 
SSNs exposed. Bradley University in Illinois reported that personally identifiable 
information (PII) including names, Social Security numbers, and dates of birth of about 
4,700 former and current employees as well as retirees, and their spouses and 
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dependents may have been exposed in a malware breach. Some employees were 
notified by the Internal Revenue Service that irregular activity was spotted on their tax 
filings. 

Source: http://news.softpedia.com/news/Bradlev-University-Svstems-Infected-with- 
Malware-SSNs-Exposed-477148.shtml 

23. March 30, USA Today - (International) Former feds charged with stealing Silk Road 
bitcoin. A former U.S. Secret Service agent surrendered to authorities March 30 and a 
U.S. Drug Enforcement Administration agent was arrested March 27 in connection to 
allegedly stealing over $1.5 million in bitcoins while investigating the Silk Road, a 
shutdown underground site that traded in illegal drugs, counterfeit IDs, and computer 
hacking software. The pair, based in Maryland, stole proceeds from the site and hid the 
funds in offshore accounts, often utilizing their positions in the government to obtain 
the bitcoins. 

Source: http://www.usatodav.com/storv/news/2015/03/30/federal-agents-charged-with- 
stealing-bitcoin-from-silk-road-case/70672058/ 

24. March 30, Victorville Daily Press - (California) ‘High-voltage electrical’ failure 
closes VVC. Classes at Victor Valley College in California were canceled and the 
campus was closed March 30 due to an electrical failure March 29 that caused a power 
outage. College officials reported that the campus is expected to reopen March 31. 
Source: http://www.vvdailvpress.com/article/20150330/NEWS/150339999 

25. March 30, Atlanta Journal-Constitution; WSB 2 Atlanta - (Georgia) Four Public 
Works employees arrested on theft charges. Police arrested and charged four Atlanta 
Department of Public Works employees March 30 in connection to stealing and selling 
city-owned metals to recycling centers over the course of several years after an audit 
found that the city lacked adequate controls for tracking its equipment and that millions 
of dollars in materials were unaccounted for. Two Department of Watershed 
Management employees were taken into custody the week of March 23 on similar 
charges. 

Source: http://www.aic.com/news/news/breaking-news/public-works-employees- 
arrested-on-theft-charges/nkhqw/ 

26. March 30, Jackson Clarion-Ledger - (Mississippi) U.S. Forest Service helicopter 
crashes in Harrison County; coroner on scene. Two contract workers were killed 
and a third was injured after a U.S. Forest Service helicopter crashed in Harrison 
County during a controlled burn of 800 acres in the DeSoto National Forest March 30. 
Authorities reported to the scene to investigate the crash. 

Source: http://www.clarionledger.com/storv/news/2015/03/30/forestry-helicopter- 
crashes-in-harrison-county/70689320/ 

27. March 30, KOTA 3 Rapid City - (South Dakota) Harding County fire scorches 
thousands of acres. Crews worked to contain the Sheep Draw fire which burned about 
6,430 acres in the West Short Pines area of Harding County, South Dakota, March 30. 
Several structures including natural gas well sites are in the line of fire and structure 



crews remained on site to monitor the area. 

Source: http://www.kotatv.com/news/south-dakota-news/Harding-County-fire- 
scorches-thousands-of-acres/32089 1 66 



28. March 30, WCBS 2 New York City - (New Jersey) Rutgers University trying to 
restore computer systems after denial-of-service attack. Rutgers University in New 
Jersey continued to work March 30 to restore its computer systems following a March 
27 distributed denial-of-service (DDoS) attack that caused Internet services to slow 
down or shut down portions of the university’s server. School officials reported that no 
personal or confidential information was breached in the attack which is still being 
monitored. 

Source: http://newvork.cbslocal.com/2015/03/30/rutgers-universitv-trying-to-restore- 
computer-systems-after-denial-of-service-attack/ 

29. March 30, WHAS 11 Louisville - (Kentucky) JCPS driver, 7 students transported to 
hospital after Poplar Uevel Rd. accident. Seven students and the bus driver were 
transported to an area hospital following an accident between a Jefferson County Public 
School bus and a vehicle March 30 in Louisville. 

Source: http://www.whas 1 1 .com/story/news/traffic/accident- 

construction/2015/03/30/police- working-scene-of-bus-accident-on-poplar- level -road- 
naomi-drive/70688274/ 



30. March 30, Associated Press - (Connecticut) Connecticut College cancels classes over 
racist graffiti. Connecticut College in New London canceled classes March 30 after 
racist graffiti was discovered March 29 in bathroom stalls inside a student center. The 
college’s president schedule a series of events in place of classes to promote discussion 
on the topic. 

Source: http://www.msn.com/en-us/news/us/connecticut-college-cancels-classes-over- 
racist- graffiti/ar-AAad2Pg 

31. March 30, Hartford Courant - (Connecticut) Manchester school evacuated after 
chemical odor spreads. Two teachers were transported to an area hospital while 8 
students were treated on site for nausea and headaches after The Cornerstone Christian 
School in Manchester, Connecticut, was evacuated due to a chemical being used in the 
basement of the school which spread to other parts of the building March 30. Students 
and staff returned after firefighters ventilated the building. 

Source: http://www.courant.com/community/manchester/hc-manchester-haz-mat-0331- 
2-20150330-story.html 



For another story, see item 35 
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Emergency Services Sector 

32. March 30, KWES 9 Midland/Odessa - (Texas) Odessa man caught impersonating 
police officer. A man was arrested in Odessa, Texas, March 30 by an off-duty police 
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officer for impersonating a police officer by using professionally installed flashing 
lights and sirens on his vehicle. The suspect admitted to impersonating a police officer 
on other occasions prior to his arrest. 

Source: http://www.newswest9.com/story/28654661/odessa-man-caught- 
impersonating-police-officer 
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Information Technology Sector 

33. March 31, Softpedia - (International) Anonymous proxies used for “Shotgun DDoS” 
attacks. Security researchers at Incapsula released findings from a one-month study 
revealing that 20 percent of all Layer 7 application layer distributed denial-of-service 
(DDoS) attacks from January - February were “Shotgun DDoS” attacks carried out 
through anonymous proxies to bypass mitigation systems by spreading across multiple 
internet protocols (IPs) and multiple geo-locations. Approximately 45 percent of the 
incidents originated from addresses in the Tor anonymity network and 60 percent of 
them employed Tor’s Hammer denial-of-service (DoS) tool, which carries out low-and- 
slow power-on self-test (POST) attacks. 

Source: http://news.softpedia.com/news/Anonvmous-Proxies-Used-for-Shotgun-DDoS- 
Attacks-477193.shtml 



34. March 31, Softpedia - (International) Trojan Laziok used for reconnaissance in the 
energy sector. Security researchers from Symantec identified new malware designed 
for stealing information, dubbed Laziok that was observed targeting users in the 
petroleum, gas, and helium industries worldwide, and is delivered via a malicious 
Microsoft Excel file that exploits a buffer overflow/security glitch that allows remote 
code execution, and downloads custom variants of Cyberat and Zbot malware from 
servers in the U.S., United Kingdom, and Bulgaria. 

Source: http://news.softpedia.com/news/Troian-Laziok-Used-for-Reconnaissance-in- 
the-Energy-Sector-477175.shtml 

35. March 31, Network World - (International) Lebanese cyberespionage campaign hits 
defense, telecom, media firms worldwide. Security researchers at Check Point 
Software Technologies discovered that a cyberespionage group has hacked into 
hundreds of defense contractor, telecommunications operator, media group, and 
educational organization networks from at least 10 countries in ongoing attacks that 
began in late 2012. The attackers detect vulnerabilities and use Web shells to 
compromise affected servers, including a sophisticated custom-made trojan on servers 
running Microsoft’s IIS software called Explosive that can infect servers and systems 
on networks and can spread via USB mass storage devices. 

Source: http://www.networkworld.com/article/2904293/lebanese-cyberespionage- 
campaign-hits-defense-telecom-media-firms-worldwide.html#tk.rss all 

36. March 30, Threatpost - (International) eBay fixes file upload and path disclosure 
bugs. eBay addressed two security vulnerabilities on its Web site that allowed attackers 
to upload malicious files, including executables, disguised as images that could be used 
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in drive-by download attacks by leveraging poor header check’s and eBay server return 
messages with exact file paths. 

Source: https://threatpost.com/ebav-fixes-file-upload-and-patch-disclosure- 
bugs/111898 

For another story, see item 23 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 35 
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Commercial Facilities Sector 

37. March 31, San Antonio Express-News - (Texas) Around 30 people evacuated from 
apartments after fire at River Walk restaurant. A fire at Saltgrass Steak House 
along the San Antonio River Walk in Texas March 31 temporarily displaced about 30 
residents of apartments located above the restaurant when smoke filled the units and 
authorities shut off electricity to the building. 

Source: http://www.mvsanantonio.com/news/local/article/Around-30-people- 
evacuated-from-apartments-after-6170114.php 

38. March 31, Hampton Roads Daily Press - (Virginia) Residents evacuated, potentially 
explosive device found at York mobile home park, officials say. The Bethel Mobile 
Home Park in York County was evacuated March 31 while bomb squad crews searched 
the area for threats to safety and investigators recovered a potentially explosive device 
from a residence owned by a suspect that what arrested and charged with 
manufacturing and possessing explosive materials or devices during the week of March 
23. The scene was cleared about 3 hours after the search began. 

Source: http://www.dailypress.com/news/crime/dp-vork-mobile-home-park-explosive- 
evacuate-story.html 

39. March 30, KSAT 12 San Antonio - (Texas) Fiesta Texas fined for improper chemical 
storage. Six Flags Fiesta Texas was fined $31,000 by the Edwards Aquifer Authority 
after inspectors determined that hundreds to thousands of gallons of chemicals were not 
stored in required tertiary tanks. A Fiesta Texas spokesperson released that no negative 
impacts to the environment have been reported, and that the theme park is working to 
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come into compliance with the requirements. 

Source: http://www.ksat.com/content/pns/ksat/news/2015/03/3Q/fiesta-texas-fined-for- 
improper-chemical-storage.html 
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Dams Sector 



40. March 30, Missoula Missoulian - (Montana) Army Corps repairing Orchard Home 
Levee to protect homes. The U.S. Army Corps of Engineers reported that a $148,000 
project to repair a 200-foot damaged segment of the Orchard Homes Levee in Missoula 
County began March 30 and will be completed by April 3 after the embankment was 
damaged in the spring of 2014 due to high flows. The repair work was approved by the 
U.S. Fish and Wildlife Service in order to prevent potential damage to homes during 
flood season. 

Source: http://missoulian.com/news/state-and-regional/armv-corps-repairing-orchard- 
homes-levee-to-protect-homes/article 28d6700e-0b22-575a-bd3f-9243e75f0463.html 
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